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Abstract — We consider the Double-negation Shift (DNS) as a 
constructive principle in its own right and its effect on modified 
realizability (MR) and Dialectica (D) interpretations. 

We notice that DNS proves its own MR-interpretation, mean- 
ing that a priori one does not have to consider the more complex 
D-interpretation with Bar Recursion for interpreting Analysis. 
From the "with truth" variant of MR, we obtain the closure under 
Weak Church's Rule. We notice, in contrast, that DNS proves the 
double negation of the Limited Principle of Omniscience (LPO), 
hence of the solvability of the Halting Problem, and recall the 
related fact that DNS refutes a formal version of Church's Thesis 
(CT). This shows that intuitionistic Arithmetic plus DNS presents 
a distinct variant of Constructive Mathematics. 

We revisit the standard approach of Kreisel and Spector for 
showing consistency of Analysis, and show that one can omit the 
preliminary double-negation translation phase. 

Finally, we formalize the proofs of not-not-LPO and not- 
CT using a previously introduced constructive logic based on 
delimited control operators from the theory of programming 
languages. 

I. Introduction 
The logical principle known as Double-negation Shift, 

Vn e N-i-iA(n) -> -.-.Vn e NA(n), (DNS) 

that is not provable by intuitionistic logic, has first been 
isolated by Sigekatu Kuroda (T). Its importance for the founda- 
tional program has been realized by Kreisel 0, who showed 
that if one can prove the Double-negation Shift, then one can 
prove the double-negation translation of the countable Ax- 
iom of Choice (AC ). Coupled with Godel's double-negation 
translation, that reduces Classical Arithmetic to Intuitionistic 
Arithmetic [3], and with Godel's functional interpretation Pfl . 
J5), (6), that interprets Intuitionistic Arithmetic by functionals 
defined by primitive recursion at higher types (System T), a 
functional interpretation of DNS allows to extend this reduc- 
tion (and relative consistency proof) to Classical Analysis. The 
functional interpretation of DNS has been given by Kreisel 
and Spector Q by adding an additional recursion schema to 
System T, called Bar Recursion. 

This method, functional interpretation with bar recursion, 
has been the main one when it comes to extracting compu- 
tational content from proofs that use both classical logic and 
choice, and has had many applications, notably in the Proof 
Mining approach of Kohlenbach (8). 

Recently, the author has shown, based on initial observa- 
tions of Hugo Herbelin, that one can prove DNS in a system for 
first-order logic, based on the delimited control operators shift 
and reset of Danvy and Filinski J9), |[TOl from Programming 



Languages Theory. This system of pure logic, in the absence 
of all axioms, has been shown to be constructive. 

The purpose of this paper is to investigate the meta- 
mathematical status of DNS in presence of higher-type In- 
tuitionistic Arithmetic (HA"). 

In Section [TT] we revise the basic relationships between 
Double-negation Shift, the Countable Axiom of Choice, and 
double-negation translations, in the context of HA". 

In Section |nil we show that DNS proves its own modified 
realizability interpretation, meaning that modified realizability 
is a viable (and simpler) alternative to functional interpretation 
and bar recursion, for extracting programs from proofs in 
Classical Analysis. This has practical implications for proof 
assistants based on intuitionistic logic that extract programs 
by modified realizability (like Coq). 

Furthermore, we show from the "with truth" variant of 
modified realizability that HA"+AC°+DNS has the construc- 
tive closure properties of HA", among which a version of 
Church's Rule. However, DNS is known to refute (formal 
versions of) Church's Thesis. We briefly review this argument, 
that goes back to Godel, and we argue that HA"+AC°+DNS is 
a variety of Constructive Mathematics that permits to see in a 
new light the diagonalization arguments that reduce a problem 
to the non-solvability of the Halting Problem. 

In Section IIV1 we also revisit the approach of functional 
interpretation and bar recursion. We observe, for the first time 
(to the best of our knowledge), that it is not necessary to 
perform a double-negation translation phase when interpreting 
Classical Analysis proofs, that is, that bar recursion already 
has some kind of double-negation translation built-in. 

In Section |VJ we apply the system from ifTTl to formalize 
the arguments relating to Church's Thesis and the Halting 
Problem, by constructive delimited control operators directly. 

In Section IVI1 we mention related works, that have not 
already been mentioned in the preceding sections, and we give 
some directions for future work. 

We hope that this work will contribute to the program of 
enriching current proof assistant with constructive principles 
that are beyond intuitionistic logic, and with programming 
principles (control operators) that are beyond side-effect-free 
programming. 

II. Preliminaries 

In this paper, we will work in the context of higher- 
type intuitionistic, or Hey ting, Arithmetic abbreviated HA". 
Intuitively, one can think of HA" as a logical system based on 



two orthogonal typed lambda calculi. At one level, we have the 
typed lambda calculus that is used to denote natural deduction 
proofs; this is the logical level, and we call the corresponding 
A-terms: proof terms. At the other level, there is the typed 
lambda calculus that constructs individuals of the domain of 
quantification (the higher-types level), and the corresponding 
A-terms are called just rermfl Hence, HA" stops short of a 
dependent type theory, which collapses the two levels into one. 
HA" is also closely connected to Godel's System T J5), a 
quantifier-free logical theory based on equations between nu- 
merical terms constructed by higher-type primitive recursion. 

Technically, HA" has as basis a multi-sorted first-order 
logic, with sorts built from (standing for N) and the arrow — > 
(used to build functions and functionals over N). These sorts 
are called higher types (or just types). Quantifiers V, 3 are then 
tied to specific types; we usually suppress writing the type of 
a quantifier, but, when not clear from the context, the variable 
that is quantified over is annotated by a type in superscript. 
We use as type variables the symbols p, cr, r. 

For the proof terms we will use the concrete syntax from 
the upper box of Table [I] ignoring for the moment all 
annotating the K 

The terms live in a lambda calculus with arrow, product and 
unit types. We have lambda abstraction Xx.t and application 
ts concerning the arrow type. Using pairs (t, s) we construct 
members of the pair type, and using the projections t\ and t%, 
we destruct themQ The constructor of the unit type is denoted 
tt. 

There is a decidable equality relation =o between terms 
of type (numbers). The Peano axioms are stated in terms of 
this equality, including the induction axiom schema for type 
individuals. For the purposes of this paper, we do not need 
to be more precise than this, for more information the reader 
may take a look at a standard reference book like ifPJl or fl8]. 

We will consider the following principles, both unprovable 
in HA". The Double-negation Shift at type p, 

Vx p ^A(x) -> -^-Nx p A(x), (DNS p ) 

and the Axiom of Choice at types p and a, 

Vx p 3y a A{x, y) -> 3f p ^ a VxA(x, f{x)). (AC* 7 ) 

Particularly important will be the instances DNS and AC 
(short for AC 0<7 ). We will write DNS" and AC" when we 
intend to have DNS p and AC 7 for all p and a. 

Although both DNS and AC are unprovable in HA", 
the later is admissible for arithmetical formulas, that is, if 
HA"+AC°proves an arithmetical A, then HA"alone proves 
A fT3). A formula is arithmetical if it contains only type 
quantifiers. 

HA" extended with the Law of Excluded Middle is called 
PA", higher-type classical, or Peano, Arithmetic. The relation 
between HA" and PA" is given by double-negation translation. 

1 In standard presentations, the terms level is given by a combinator calculus, 
but a A-calculus treatment is also possible, see for example 1.8.4. of 1121 . 

2 This unusual notation for writing projections is quite efficient when used 
in sections [TTTI and P*Vl 



Definition 1 (Kuroda's double-negation translation 0J|, or the 
call-by-value continuation-passing style translation |[T4l ). The 
double-negation translation of A is the formula A '■= -<-<A±, 
where A± is defined by recursion on the complexity of A by 
the clauses: 



P± 

(AAB) ± 
(A V B)j_ 
(A B) ± 
(VxA(x)) ± 
(3xA(x)) ± 



= P P-prime 

= A± A B± 
= A ± VB ± 
= A ± ^B ± 
= Vx(A x (x)) 
= 3x(A x (x)) 



Fact 1 (Q21). In PA", hin A x . Also, V h A in PA" if 
and only ifT± h A in HA U , where T± stands for the context 
obtained by applying the (•) ^-translation to all formulas in V. 

Fact 2 (Lemma 1.10.9 of El). In presence of DNS U , HA" 
can prove the equivalence 

-i-iA O A 1 - 

between the double-negation of A and the double-negation 
translation of A. DNS° suffices to prove the same statement 
for arithmetical formulas A. 

Fact 3. If A is an instance of AC pa , then h A±_ (and therefore 
also h A x ) is derivable in HA U +AC pa +DNS P . 

Proof: The proof term 

Aa.Afc.(i(Ax.Afc'.aa;(Aa'.dest a' as (x.e) in fc(x, e))) 

(A6.jfe(c6)) 

derives 

Vx"-.-- 3y°A ± (x,y) -> A x (x, f(x)), 

when the proof terms d and c derive the following instances 
of DNS P and AC 7 : 

d : Wx-i-3y-i-iA±(x,y) — > -<-<\/x3y-<-iA±(x,y) 
c : Vx3y-i-iA_L(x,y) ->■ 3f\/x^A±(x, f(x)) 



We call the theory PA"+AC°, Classical Analysis. 

III. Modified realizability interpretation of DNS 

Kreisel's modified realizability interpretation lfT31 can 
be seen as a precise statement of the Brouwer-Heyting- 
Kolmogorov interpretation of intuitionistic logic, although its 
original aim was to show the non-derivability of Markov's 
Principle in Heyting Arithmetic. It is this realizability interpre- 
tation that is behind the program extraction facilities of proof 
assistants based on intuitionistic logic like Coq. 

Let us recall the definition and basic properties of modified 
realizability relevant to this paper. The proofs of the facts may 
be found in standard references as ifTZl . |[T6l , JS] 

Definition 2. For a term t and a formula A, the relation t mr A 
(t interprets A by modified realizability) is defined by recursion 



on the complexity of A, by the following clauses: 

t mr P := P if P-prime, t = tt 

t mr A A B := (h mr A) A (i 2 mr B) 

t mr A V B := (i 2 =o -> in mr A) A (i 2 7^0 -> ii 2 mr B) 
t mr A -> S := Vx(.t mr A ->■ fee mr B) 
£ mr 3yA(y) := ti mr A(t 2 ) 
i mr VyA(y) := Vy(iy mr A(y)) 

Remark 1. The type of the term t such that t mr A is 
determined solely by the logical form of A. 

Fact 4 (Soundness of modified realizability). From a deriva- 
tion of Ai, A2, . . . , A n h B in HA", we can con- 
struct a term t in the variables X\,X2,---,x n such that 
x\ mr A\,x% mr A 2 ,.. ., x„ mr A„ h t mr B in HA". 

Fact 5. For any A an instance of AC", there is a term t such 
that h t mr A in HA". 

Theorem 1. HA"+AC pa +DNS p proves the modified realiz- 
ability interpretation of DNS P . 

Proof: A term t mr-interprets DNS P if and only if, by 
definition of mr , the following three chains of equivalences 
hold inside HA": 

t mr DNS P (1) 

Wy([y mr Vn p — A(n)] -> [ty mr ^Mn p A(n)]) (2) 



and 



y mr Vn p -i-A(n) 
Vn p (yn mr -i-A(n)) 
\/n p Vz([z mr -A(n)] -4 [ynz mr _L]) 
\/n p \/z^[z mr ->A(ri)] 



(3) 
(4) 
(5) 
(6) 



\/n p Vz^[\/u({u mr A(n)} -> {zu mr _L})] (7) 

\/n p \Jz^\Ju^{u mr A(n)} (8) 

Vn p ^Vu^{u mr A(n)} (9) 

Vn p ^^3w{M mr A(n)} (10) 



and 



mr ^-Wn p A(n) 
Vg([g mr -iVn p A(n)] -> [tyg mr _L]) 
Vg-fe mr -Nn p A{n)] 
Vg-iVr([r mr Vn p A(n)] -> [gr mr _L] 
Vg-i\/r-iV?i p {rn mr A(n)} 

-i\/r-iVri p {rn mr A(n)} 

-i-i3rVn p {rn mr A(n)} 



(11) 
(12) 
(13) 
(14) 
(15) 
(16) 
(17) 



Then, the implication (fT0|) — > (| 1 7[) can be proved using 
DNS P and AC pcr , where the type a is determined by the logical 
complexity of the formula A(n). ■ 

Corollary 1. If the theory PA" + AC" proves A, then the theory 
HA"+AC"+DNS" realizes -1-1 A with a term t extracted by 
modified realizability from the original proof. Hence, proofs of 
arithmetical formulas in Classical Analysis (PA"+AC°) can 
be interpreted inside the theory HA" +AC° +DNS by modified 
realizability. 



Proof: This follows by applying double-negation trans- 
lation (Fact [TJ, then eliminating AC"^ from the context in 
favor of AC^+DNS" (Fact |3), then applying Soundness for 
mr (Fact|4]i, eliminating the mr-translation of AC" by Fact[5J 
and eliminating mr-translated DNS" in favor of non-translated 
DNS" and AC" (Theorem [TJ- In the end, one uses Fact |2] to 
replace A 1 - by the intuitionistically stronger -1-1 A ■ 

In the rest of this section, we will show that the theory 
HA"+AC"+DNS" is constructive, i.e. that HA"+AC"+DNS" 
satisfies certain closure rules characteristic of HA" alone. 

We will need the following "with truth" variant of modified 
realizability from [[16], 0. 

Definition 3. The interpretation called modified realizability 
with truth (mrt) is obtained when the clause for implication 
from Definition [2] is replaced by 

t mrt A ->■ B := \/x{x mrt A^tx mrt B) A (A ->■ B). 

We need mrt- because of the following fact that does not 
hold for simple mr-realizability. 

Fact 6 (HI). For any formula A, we have that, in HA", h 
(t mrt A) — > A 

Corollary 2. From a derivation in HA" +AC" +DNS" of 
Ai, A 2 , . . . , A„ h B , one can construct a term t in 
the variables x\, a; 2 , . . . , x n such that, in HA" +AC" +DNS" , 
xi mrt Ai,x2 mrt A 2 , ...,x n mrt A n h t mrt B. 

Proof: Theorem Q] allows us (by Theorem 3.4.5 of 
|[T2l and Theorem 3.5 of ifTBI ) to obtain a soundness 
theorem for mr- and mrt-interpretation, for the extension 
HA"+AC"+DNS" of HA". ■ 

Corollary 3. The theory HA" + AC" + DNS" (and, in particu- 
lar, also HA"+AC°+DNS°) satisfies: 

• the Existence Property (EP): if A is a formula (even 
an open one) such that T h 3x T A(x) then there exists 
a term t T , with free variables x, such that x mrt T h 
A(t); 

• the Existence Property (EP°) for closed arithmetical 
formulas 3x°A(x): if h 3x°A(x), then there exists 
n G N such that h A(n), where n denotes the 
representation of n inside HA" ; 

• the Disjunction Property (DP ) for closed arithmetical 
formulas A V B: if\-AVB, then either h A or h B; 

• the Weak Church Rule (WCR°) for closed arithmetical 
formulas Vx°3y°A(a;, y): if h \/x°3y°A(x, y), then 
there exists a total recursive function f : N — > N ^mc/z 
f/iaf, /or aW (i 6 N, we /lave f/taf h A(n, f(n)). 

Proof: The proof follows the ones of Corollary 5.24 of 
and 1.11.7 of |[T2l . 

EP is obtained by Corollary [2] and Fact [6] 

EP° follows by EP and the fact that for every closed term 
t of type we can find n G N such that h f =0 n. 

DP is proved like EP°, using the mrt-interpretation of A V 



B, 



h (t = -> s mrt A) A (t ^ -> s mrt £), 



and the fact that, for any n G N, either n =o or n 7^0 0. 

For WCR, note first that the theory HA^+AC^+DNS", 
like HA", is recursively axiomatizable, that is, there exists a 
recursive predicate Proof(fc, I) formalizing the fact that k G N 
is a code for a derivation of the formula coded by I G N. 

Let g(n) = min m Proof (jim, r A(n,j2'm)~ l ), where j\ and 
j2 are the projections of some surjective pairing function. By 
its definition, g is a partial recursive function. 

Now, given h \/x°3y°A(x, y) and n G N, we obtain 
h 3r/ A(n, y), and by EP° we obtain m G N such that 
h A(n, m). We proved that, for every n, there exists m s.t. 
h v4(n, m). This shows that the function g is total recursive. 
We may now take f(n) j 2 (g(n)) and by definition we have 
that, for any n, h A(n, f{n)). ■ 

Remark 2. By the work of Joan Rand Moschovakis ifPTl . we 
know that the theory HA aJ +AC°+DNS°+MP+GCi, where GCi 
is a generalization of Brouwer's Continuity Principle, satisfies 
the following version of Church's Rule, where the recursivity 
of the function / is proven inside the theory, 

h Vx°3y°A(x,y) 

h 3z°Vx 3u°(T(z, x, u) A A(x, U(u))). (CR°) 

That result, obtained by a variant of Kleene's number- 
realizability could probably also be obtained for the restriction 
HA^+AC°+DNS° without MP and GCi. 

A. HA"+AC°+DNS° as a distinct variety of Constructive 
Mathematics 

In contrast to the constructive closure properties satis- 
fied, the theory HA"+AC°+DNS° has some surprising meta- 
mathematical properties that we review in this subsection. Let 
us first consider the following fact due to Kreisel [fT~8l . 

Fact 7. The following forms of DNS are intuitionistically 
equivalent: 

Vx^A(x) -> ^WxA(x) (18) 

-NxA{x) -> -Nx^A{x) (19) 

^\/x{A{x) V -^A(x)) (20) 

-.[Vx-.-. A{x) A -NxA{x)] (21) 

The variant (l20l of DNS allows to immediately deduce the 
double-negation of Bishop's Limited Principle of Omniscience 
(LPO) Ull: given / : N -S- {0, 1}, 

3nf(n) = 1 V -dn/(ji) = 1, (LPO) 

or, equivalently, 

3nf(n) = 1 V Vn/(n) = 0. 

Related to this fact |20), for A(x) := 3yT(a;, x, yfl from 
DNS one obtains that it is not the case that the Halting 
Problem can not be solved, 

-<-\/x(3yT(x, x, y) V -<3yT(x, x, y)). (-1-1HP) 

3 T(x, z, y) is Kleene's primitive recursive predicate formalizing the fact 
that the program coded by x, returns with result coded by y, when run on 
input coded by z. Kleene's function U (y) is used to extract the actual output 
from the coded result y. 



Given the fact that the (single) negation of HP is intuition- 
istically provable from Church's Thesis lETI . this means that 
DNS refutes Church's Thesis, like the one formalized by 

Vx°3y°A(x, y) -> 3z°\/x 3u°(T(z, x, u) A A(x, U(u))). 

(CT°) 

Fact 8. DNS implies -nCT°. 

This had already been noticed by Godel JU, reported by 
Kreisel ll22ll . and also appears in later print (3.5.20 of |[T2| ). 

From Corollary [3] and the above proofs of -i-LPO, -1-1HP, 
and ^CT , it follows that the system HA"+AC°+DNS° is a 
variety of Constructive Mathematics |[T9l similar to Brouwer's 
Intuitionism (that proves -iCT ), but distinct from Russian 
Constructivism (that postulates CTo and proves -LPO) and 
from Classical Mathematics (that proves ->CTo, but does 
not have the Existence Property). Note, however, that, when 
considered at higher types, DNS^, contradicts with certain 
continuity principles l23l . 

IV. DlALECTICA INTERPRETATION IN PRESENCE OF DNS 

The functional "Dialectica" interpretation was proposed by 
Godel 1H, J5], [ED, before modified realizability was developed, 
as a way to make precise the somewhat vague notion of 
construction in the Brouwer-Heyting-Kolmogorov interpreta- 
tion of intuitionistic implication. The Dialectica interpreta- 
tion is a realizability technique for intuitionistic Arithmetic 
(implemented as a program extraction feature in the Minlog 
proof assistant), that also plays a fundamental role in estab- 
lishing the consistency of classical Mathematics. Namely, by 
Spector's extension of HA W by an equation schema called 
Bar Recursion (BR), and by the double-negation translation, 
Classical Analysis (PA W +AC°) can be interpreted in HA"+BR. 
As mentioned in the Introduction, the key in this interpretation 
is to Dialectica-interpret DNS by BR. 

In this section, we notice that the standard method for 
interpreting Classical Analysis can be simplified, by omitting 
the double-negation translation phase. That is, we show that 
the Dialectica interpretation in presence of DNS already has 
the double-negation translation built-in. 

Definition 4. The term t interprets the formula A by Dialec- 
tica, if, for all terms s, the relation \A\l holds. This relation is 
defined by recursion on the complexity of A by the following 
clauses: 

\P\l := P if P-prime, t = tt, s = tt 

|AAB|* := \A\l\A\B\% 

\A V B\l := (f a = -> \A\*£) A (f 2 ^ -> \B\*£) 
\A B\l := \A\tl SlS2 -> \B\%* 
\3xA(x)\l := \A(t 2 )ft 
\VxA(x)\l := \A(s 2 )\\f 

Fact 9 (Soundness of Dialectica interpretation lfl2l ). From 
a derivation of Ax, A 2 , . . . , A n h B in HA", we can con- 
struct a term t in the variables x\, x 2 , ■ ■ ■ , x n such that 
Vy\Ax\%\Vy\A i \f,...,Vy\A n \* y "hVy\B\ t y in HA". 

Fact 10 ( 11121 ). For any A an instance of AC" , there is a term 
t such that h Vy|A|* in HA". 



Fact 11 (ID). From the stability (decidability) of quantifier- 
free formulas in HA U , and the fact that the \ ■ \ translation 
eliminates quantifiers, we have that, in HA U , 

h h^4|* o \A\ (t2 % S2)l w . , . 

Spector's result can now be stated in the following form. 

Fact 12 (Theorem 11.6 of |8|). If h A in PA^+AC , then 
there exists a term t such that h Vj/| ^4"*" |^ in HA^+BR. 

The following theorem is an improvement of the previous 
fact, that nonetheless uses the same old technology. 

Theorem 2. If h A in PA U +AC°, then there exists a term t 
such that h Vy\A\ {t2V , 1 t V2)l > ,. > in HA U +BR. 

al 'j/12(t22/iy2)l(t2j/lJ/2)2 

Proof: Starting from a derivation 

PA"+AC° h A, 

by double-negation translation (Fact [TJ, we obtain 

HA"+AC°_l h A- 1 . 

From Fact ... and Fact [2] we get 

HA"+AC°+DNS° h -i-iA. 

Now, by Soundness of Dialectica (Fact [9]), facts [10] and [TT] 
and the fact that DNS is provable in HA"+BR, we obtain 

HA"+BRhVy|A| (t2 ^ y2)l . s 

l yi2(«2J/lJ/2)l(*2l/ia2)2 

as needed. ■ 

Remark 3. The quantifier-free axiom of choice, 

Vx»3y a A (x, y) B/^VxMo^, /(*)), (QF-AC) 

where Aq is quantifier free, can be included among the 
premises in both Fact Q~2] lTT2l and Theorem [2] thanks to the 
fact that its interpretation depends only on the Dialectica- 
interpretability of Markov's Principle at higher-types (which 
is available). We have not done so, in order not to confuse the 
reader with two choice axioms that partially overlap. 

Remark 4. While the interpretation of Classical Analysis 
from Section [ill] takes place in the theory HA"+AC°+DNS°, 
Spector's interpretation takes place in HA"+BR without AC . 

V. Applications of derivability of DNS by 

DELIMITED CONTROL OPERATORS 

The original motivation for studying the meta-mathematical 
properties of DNS is our previous work 11241 . [UTI on the 
logical system MQC+ that derives DNS using the shift and 
reset delimited control operators of Danvy and Filinski ||9l , 
iflOl , an abstraction developed in the theory of programming 
languages. 

In this section, we propose to formalize some arguments 
from Section |lll] that use DNS, by delimited control operators 
directly. For that purpose, consider the first-order logic given in 
natural deduction form in Table U The usual natural deduction 
rules for intuitionistic logic are given in the upper box. They 
have a turnstile annotated by a diamond , which is a wild-card 
that stands either for nothing (empty annotation), or stands for 

In any case, for the intuitionistic rules, the wild-card stands 



for the same thing both in the premises and in the conclusion 
of the rule. 

The non-intuitionistic rules are given in the lower box. 
There is the reset rule, that can be used with an empty or 
with o being ±. In the former case, the role of reset is to begin 
a classical proof of _L; in the later case, there is no logical 
meaning to the reset rule, but there is computational meaning 
to it, coming from the operational semantics for shift and reset. 
There is also the shift rule, that allows to use a principle similar 
to double-negation elimination from classical logic, but only 
inside a derivation that is ultimately proving _L, as guaranteed 
by a reset rule which must have set the annotation to _L before. 

For more explanations and the computational behavior of 
MQC+, please refer to ifTTI . 

We now give proof terms that formalize the proofs of the 
four alternative versions of DNS from Fact [7] 

Xh.\k.#k(Xx.Sk'.hxk') (22) 

Xk.Xh.#k(Xx.Sk'.hxk') (23) 

Xk.#k(Xx.Sk' .fc'(inr (Aa.fc'(inl a))) (24) 

\h.#(sndh)(Xx.Sk.(fsth)xk) (25) 

We can see that the proof term (l24l i. that also formalizes 
the proof or ->-.HP, awaits to receive a proof term for ^HP, 
and, once it gets it, it uses # to prove _L by classical logic: to 
the obtained proof term it supplies a classical proof of HP, 

Xx.Sk'.k'(im:(Xa.k'(hda))) 

: Vx(3yT(x, x, y) V -ByT{x, x, y)). 

To give the proof term for ~CTo, we only need a for- 
malized proof of the implication CTo — > -HP. This proof is 
intuitionistic and, in principle, it could be formalized in HA", 
following, for example, (2T|. 

This technique can be used to refute in MQC++HA" any 
property P that implies -HP or -iLPO. Assume that such a 
proof term 

r : P -> -.HP 

is given. Then, 

Xp.#r(Xx.Sk'.k'(im(Xa.k'(mla)))) : ->P. 

Since reducing a problem to the non-solvability of the Halting 
Problem is a common proof method, this means that all such 
results can be seen in a new light in the constructive logic 
HA W +AC°+DNS°. 

VI. FUTURE AND RELATED WORK 

In the future, we would like to extend the modified realiz- 
ability interpretation to the whole of the system MQC++HA". 
This would allow us to extract a realizer for -.-AC" by 
delimited control operators. Currently, it is not known whether 
DNS" captures exactly the additional provability power that 
MQC+ has over intuitionistic predicate logic. 

Usually, modified realizability and the Dialectica interpre- 
tation are developed using Hilbert-style systems. In this paper, 
we used natural deduction. For detailed development of mr- 



(a : A) e r r h p : Aj rh^iitj r h p : Ai a a 2 j r h, p : A t A A 2 
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r h a : A T h (p, g) : Ai A A 2 T h fst(p) : Aj e T h snd(p) : A, 

F h o P : A » v l rh oP :AiVAi r.ai : Ai hp gi : C F, a 2 : A 2 h q 2 : C 

r ho inl(p) : Ai V A 2 1 r h case p of (oi .91 ||a 2 .g 2 ) : C E 

r\- oP :A t „ r,a : Ai h p : A 2 _^ r h p : Aj -> A 2 r h q : Ai _^ 

Vr 



T h<> inr(p) : Ai V A 2 1 T h« Aa.p : Ai -> A 2 r h pq : A 2 

rh,p: A(x) x-fiesh r h p : VkA(x) rh oP : A(t) 

' Vl — ^ : — 7777— Vi3 



r h Ai.p : Viifi) r ho pt ■ A(t) r h (t,p) : 3x.A(x) 

r ho p : 3x.A(x) T, a : A(x) h q : C Z -fresh T hp p : _L 

r ho dest p as (x.a) in q : C ^ E r h o of q(p) : A 



-Li 



# ( reset ) — — 5 ( shift ) 



r ho #p : X fhi Sfe.p : A 



TABLE I. Natural deduction system with proof terms for MQC + 



and D -interpretation in the context of natural deduction, the 
reader may refer to ll25l . 

In the context of Constructive Reverse Mathematics, Wim 
Veldman has shown that, in presence of Markov's Principle, 
the Double-negation Shift is equivalent to Open Induction on 
Cantor space l26l . Based on his work, in unpublished work 
1271 , Keiko Nakata and the author show how to prove the 
principle of Open Induction on Cantor Space using delimited 
control operators. 

In l28l . Paulo Oliva revisits Spector's bar recursive inter- 
pretation of DNS. In particular, he remarks that the finitary 
version of DNS, in which "V" is replaced by a finite conjuction, 
is provable intuitionistically. 
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